{
    "id": 61263,
    "date": "2026-02-04T09:22:32",
    "date_gmt": "2026-02-04T02:22:32",
    "guid": {
        "rendered": "https:\/\/hbbgroup.net\/alleged-bitcoin-ransom-note-sent-to-tmz-in-case-involving-today-show-hosts-missing-mother\/"
    },
    "modified": "2026-02-04T09:22:32",
    "modified_gmt": "2026-02-04T02:22:32",
    "slug": "alleged-bitcoin-ransom-note-sent-to-tmz-in-case-involving-today-show-hosts-missing-mother",
    "status": "publish",
    "type": "post",
    "link": "https:\/\/hbbgroup.net\/en_us\/alleged-bitcoin-ransom-note-sent-to-tmz-in-case-involving-today-show-hosts-missing-mother\/",
    "title": {
        "rendered": "Alleged Bitcoin Ransom Note Sent to TMZ in Case Involving ‘Today’ Show Host’s Missing Mother"
    },
    "content": {
        "rendered": "<div>\n<div>\n<h4 color=\"#333\">In brief<\/h4>\n<ul>\n<li>An alleged ransom note demanding millions in Bitcoin has surfaced in the investigation into Nancy Guthrie\u2019s disappearance.<\/li>\n<li>The Pima County Sheriff\u2019s Office said it is reviewing all tips and coordinating with the FBI, but declined further comment.<\/li>\n<li>Authorities believe Guthrie was abducted and are treating the case as a criminal investigation.<\/li>\n<\/ul>\n<\/div>\n<p>An alleged ransom note demanding Bitcoin has surfaced in the investigation into the disappearance of Nancy Guthrie, the 84-year-old mother of Today show anchor Savannah Guthrie, as authorities continue to treat the case as a suspected abduction.<\/p>\n<p>The note, first <a href=\"https:\/\/www.tmz.com\/2026\/02\/03\/nancy-guthrie-alleged-ransom-note-bitcoin-millions\/\" target=\"_blank\" rel=\"noopener\">reported<\/a> by <i>TMZ<\/i>, is allegedly demanding \u201ca large\u201d Bitcoin payment in exchange for Guthrie\u2019s release. The ransom note emailed to <i>TMZ<\/i> reportedly includes a deadline and an implied threat against Guthrie if the demand is not met.<\/p>\n<p>\u201cWe have called the sheriff\u2019s department. We\u2019ve made multiple calls and spoken with the detective unit,\u201d <i>TMZ<\/i> founder and host Harvey Levin said during a segment of <i>TMZ Live<\/i>. \u201cWe have passed on this email. We don\u2019t know whether this is legit or not.\u201d<\/p>\n<p>Guthrie was last seen on the evening of January 31 at her home in the Catalina Foothills area of Arizona.<\/p>\n<p>Authorities initially classified her as a missing vulnerable adult because of her age, before announcing on February 2 that the case was being treated as a \u201c<a href=\"https:\/\/www.today.com\/news\/savannah-guthrie-mom-missing-arizona-rcna257021\" target=\"_blank\" rel=\"noopener nofollow external\">possible kidnapping<\/a>\u201d after investigators found what they described as \u201cvery concerning\u201d evidence inside the home.<\/p>\n<p><i>TMZ\u2019s<\/i> Levin said that media outlets receiving these types of ransoms are not uncommon and \u201chappen from time to time.\u201d<\/p>\n<p>Law enforcement has not confirmed whether they believe the ransom note is actually from the kidnappers or a hoax to steal Bitcoin.<\/p>\n<p>The Pima County Sheriff\u2019s Office declined to comment further when contacted by <i>Decrypt<\/i>, but pointed to a statement previously issued on social media.<\/p>\n<p>\u201cWe are aware of reports circulating about possible ransom note(s) regarding the investigation into Nancy Guthrie,\u201d the sheriff\u2019s office <a href=\"https:\/\/x.com\/PimaSheriff\/status\/2018789092096381233?s=20\" target=\"_blank\" rel=\"noopener nofollow external\">wrote<\/a> Tuesday on X. \u201cWe are taking all tips and leads very seriously. Anything that comes in goes directly to our detectives, who are coordinating with the FBI.\u201d<\/p>\n<p>While the authenticity of the ransom note has not been confirmed, <i>TMZ<\/i> executive producer and co-host Charles Latibeaudiere said the messaging included a real Bitcoin address.<\/p>\n<p>\u201cOne thing we should say is that we have confirmed the Bitcoin address that they&#8217;ve included is legit,\u201d he said. The note also included a description of what Guthrie was wearing at the time and a damaged item in the house, <i>TMZ<\/i> said.<\/p>\n<p><i>Decrypt<\/i> has reached out to <i>TMZ<\/i> to confirm the address&#8217;s authenticity and will update this article should they respond. Representatives for Savannah Guthrie did not immediately respond to <i>Decrypt&#8217;s<\/i> request for comment<i>.<\/i><\/p>\n<h2 color=\"#333\"><strong>Bitcoin kidnappings and extortion<\/strong><\/h2>\n<p>The use of Bitcoin in ransom demands dates back more than a decade, when early ransomware strains began demanding crypto payments to unlock encrypted files. The model later became widespread across cybercrime.<\/p>\n<p>In recent years, that tactic has increasingly appeared in physical kidnapping, turning into so-called \u201c<a href=\"https:\/\/decrypt.co\/352547\/grisliest-bitcoin-crypto-wrench-attacks-grabbed-headlines-2025\" target=\"_blank\" rel=\"noopener\">wrench attacks<\/a>\u201d and extortion cases.<\/p>\n<p>In April 2024, a Canadian family was <a href=\"https:\/\/decrypt.co\/349901\/bitcoin-heist-family-members-waterboarded-sexually-assaulted-steal-1-6-million\" target=\"_blank\" rel=\"noopener\">tortured<\/a> by assailants who demanded access to their crypto holdings. In November 2024, WonderFi CEO <a href=\"https:\/\/decrypt.co\/290810\/wonderfi-ceo-safe-720000-ransom\" target=\"_blank\" rel=\"noopener\">Dean Skurka<\/a> was abducted in Toronto and released after a $720,000 ransom was paid.<\/p>\n<p>Two months later, Ledger co-founder <a href=\"https:\/\/decrypt.co\/302430\/ledger-co-founder-kidnapped-crypto-ransom\" target=\"_blank\" rel=\"noopener\">David Balland<\/a> was kidnapped in France, which included a crypto ransom demand.<\/p>\n<p>In the U.S., New York prosecutors in June of last year <a href=\"https:\/\/decrypt.co\/323260\/new-york-man-denied-bail-alleged-bitcoin-ransom-torture-plot\" target=\"_blank\" rel=\"noopener\">charged<\/a> two men with kidnapping and torturing an Italian national for weeks in an alleged attempt to force access to his Bitcoin holdings.<\/p>\n<div>\n<h3>Daily Debrief Newsletter<\/h3>\n<p>Start every day with the top news stories right now, plus original features, a podcast, videos and more.<\/p>\n<\/div>\n<\/div>",
        "protected": false
    },
    "excerpt": {
        "rendered": "<p>In brief An alleged ransom note demanding millions in Bitcoin has surfaced in the investigation into Nancy Guthrie\u2019s disappearance. The [&hellip;]<\/p>",
        "protected": false
    },
    "author": 5,
    "featured_media": 61264,
    "comment_status": "open",
    "ping_status": "open",
    "sticky": false,
    "template": "",
    "format": "standard",
    "meta": {
        "_acf_changed": false,
        "footnotes": ""
    },
    "categories": [
        220
    ],
    "tags": [],
    "class_list": [
        "post-61263",
        "post",
        "type-post",
        "status-publish",
        "format-standard",
        "has-post-thumbnail",
        "hentry",
        "category-tien-dien-tu"
    ],
    "acf": [],
    "_links": {
        "self": [
            {
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/posts\/61263",
                "targetHints": {
                    "allow": [
                        "GET"
                    ]
                }
            }
        ],
        "collection": [
            {
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/posts"
            }
        ],
        "about": [
            {
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/types\/post"
            }
        ],
        "author": [
            {
                "embeddable": true,
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/users\/5"
            }
        ],
        "replies": [
            {
                "embeddable": true,
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/comments?post=61263"
            }
        ],
        "version-history": [
            {
                "count": 0,
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/posts\/61263\/revisions"
            }
        ],
        "wp:featuredmedia": [
            {
                "embeddable": true,
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/media\/61264"
            }
        ],
        "wp:attachment": [
            {
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/media?parent=61263"
            }
        ],
        "wp:term": [
            {
                "taxonomy": "category",
                "embeddable": true,
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/categories?post=61263"
            },
            {
                "taxonomy": "post_tag",
                "embeddable": true,
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/tags?post=61263"
            }
        ],
        "curies": [
            {
                "name": "wp",
                "href": "https:\/\/api.w.org\/{rel}",
                "templated": true
            }
        ]
    }
}